13:00:37 #startmeeting image_encryption 13:00:38 Meeting started Mon Nov 9 13:00:37 2020 UTC and is due to finish in 60 minutes. The chair is Luzi. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:00:39 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 13:00:41 The meeting name has been set to 'image_encryption' 13:00:48 #topic Roll Call 13:01:20 hey there 13:01:26 hi fungi 13:01:31 o/ 13:02:30 🙋🏽‍♂️ 13:03:39 okay lets start 13:03:51 #topic Barbican Consumer API Update 13:04:05 redrobot, are there news from the barbican side? 13:04:15 No update, really... I've been working on getting the stable branches in good health. 13:04:31 Should be able to get back to Consumers this week. 13:05:07 well that's important too, and nice to hear you have the secret consumers on your list 13:05:15 #topic Image Encryption WIP-Patches 13:06:29 nothing new since the ptg, mhen and i are discussing whether to use python-gnupg or gpgme as a library (we never heard of the latter before someone mentioned it in the requirements spec) 13:07:11 if there will be any changes, it would only affect the os-brick patch and the requirements patch 13:08:38 ok 13:08:50 do you have any questions regarding the patches? 13:10:35 no, i guess the requirements team can help you work out the issues on python-gnupg vs gpgme 13:11:03 although i wonder whether the security team has suggestions 13:12:13 keeping fewer gnupg frontend libraries in the global requirements list would be preferable 13:12:36 yeah i already was working through the list with questions for the requirement, which already gives a good indication 13:12:51 smaller surface area around calls to it, fewer libraries which might have security bugs in the critical key handling paths 13:14:13 that's right, i really want to look through both libraries before we decide 13:14:41 if neither is used yet, i don't really have any immediate concerns but i also haven't compared the activity level and overall health for those 13:15:12 there is no library used right now which provides gpg 13:15:52 yeah, in that case, i'd say let common sense prevail as to which looks like a healthy, supported and reasonably stable project 13:15:58 okay 13:16:43 #topic Open Discussion 13:17:01 are there any other topics you would like to discuss? 13:20:52 i didn't have any 13:22:09 okay, thank you for joining this meeting and have a nice week 13:22:18 #endmeeting image_encryption